AbuseIPDB » 138.197.191.39

138.197.191.39 was found in our database!

This IP was reported 394 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 138.197.191.39

Whois 138.197.191.39

IP Abuse Reports for 138.197.191.39:

This IP address has been reported a total of 394 times from 117 distinct sources. 138.197.191.39 was first reported on February 1st 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Emirhan Uçan	2025-02-21 16:16:51 (1 month ago)	Related with ip address detected by heuristics of https://github.com/HydraDragonAntivirus/HydraDrago ... show moreRelated with ip address detected by heuristics of https://github.com/HydraDragonAntivirus/HydraDragonAntivirusSearchEngine (Source IP: 138.197.191.39, Source URL: , Discovered URL: http://138.197.191.39/, Verdict: ddos) show less	Brute-Force
JPPO	2025-02-21 00:05:40 (1 month ago)	Multiport scan 18 ports : 22 23 80 110 445 465 587 631 993 995(x2) 1911 2525(x2) 5060 6000 6443 8500 ... show moreMultiport scan 18 ports : 22 23 80 110 445 465 587 631 993 995(x2) 1911 2525(x2) 5060 6000 6443 8500 9092 20000 show less	Port Scan
Hans Wurst	2025-02-17 23:00:17 (1 month ago)	1739712524 - 02/16/2025 14:28:44 Host: 138.197.191.39/138.197.191.39 Port: 143 TCP Blocked ...	Port Scan
BSG Webmaster	2025-02-17 08:35:08 (1 month ago)	Port scanning (Port 8086)	Port Scan Hacking
Grizzlytools	2025-02-17 06:12:25 (1 month ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
ATV	2025-02-17 03:01:02 (1 month ago)	Unsolicited connection attempts to ports 5000, 587, 8086, 9042	Hacking
urnilxfgbez	2025-02-16 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
JPPO	2025-02-16 22:57:59 (1 month ago)	Multiport scan 18 ports : 22 23 80 110 445 465 587 631 993 995(x2) 1911 2525(x2) 5060 6000 6443 8500 ... show moreMultiport scan 18 ports : 22 23 80 110 445 465 587 631 993 995(x2) 1911 2525(x2) 5060 6000 6443 8500 9092 20000 show less	Port Scan
rtbh.com.tr	2025-02-16 16:49:45 (1 month ago)	list.rtbh.com.tr report: tcp/110, tcp/143, tcp/20000, tcp/22, tcp/23, tcp/25, tcp/445, tcp/5000, tcp ... show morelist.rtbh.com.tr report: tcp/110, tcp/143, tcp/20000, tcp/22, tcp/23, tcp/25, tcp/445, tcp/5000, tcp/5060, tcp/587, tcp/6000, tcp/8086, tcp/8500, tcp/995 show less	Brute-Force
☠\|ʂɧąɖơῳ\|☠	2025-02-16 15:40:27 (1 month ago)	[2025 Feb 16 13:26:52] TCP Port Scanning detected from 138.197.191.39 () SPT=32860 -> DPT=143	Port Scan
Study Bitcoin 🤗	2025-02-16 14:36:15 (1 month ago)	3 port probes: 2x tcp/6443, tcp/1911 (starlight networks multimedia transport) [srv131,srv127, ... show more3 port probes: 2x tcp/6443, tcp/1911 (starlight networks multimedia transport) [srv131,srv127,srv62] show less	Port Scan
Cseengineer	2025-02-16 14:32:53 (1 month ago)	Extensive Port Scan of 14 different TCP ports, partial list: 22,23,80,110,465	Port Scan
Study Bitcoin 🤗	2025-02-16 14:28:41 (1 month ago)	3 port probes: tcp/993 (imap4over tls), 2x tcp/445 (smb) [srv131,srv62,srv127]	Port Scan Hacking
Sawasdee	2025-02-16 14:27:06 (1 month ago)	SSH break in attempt ...	SSH
sashan	2025-02-16 14:24:40 (1 month ago)	2025-02-16T17:24:40.407233+03:00 gate kernel: [141739.333294] nftables: JAIL-SSH IN=wan OUT= MAC= SR ... show more2025-02-16T17:24:40.407233+03:00 gate kernel: [141739.333294] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=138.197.191.39 DST=xxx.xxx.xxx.xxx LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=48521 PROTO=TCP SPT=46704 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan